Split secrets out of containers.yaml